GDPR Compliance

1. Data Controller

The data controller for Kamili One is:

Kamili Labs LLC
Email: privacy@kamililabsllc.com

We determine the purposes and means of processing personal data collected through Kamili One.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance (Art. 6(1)(b)): Processing necessary to provide Kamili One services, manage your account, and process payments.
• Legitimate Interest (Art. 6(1)(f)): Security monitoring, fraud prevention, product improvement, and analytics.
• Consent (Art. 6(1)(a)): Marketing communications, non-essential cookies, and optional analytics.
• Legal Obligation (Art. 6(1)(c)): Tax compliance, legal hold requests, and regulatory requirements.

3. Data Subject Rights

Under the GDPR (Articles 15-22), you have the following rights:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to Erasure (Art. 17): Request deletion of your personal data (“right to be forgotten”).
• Right to Restriction (Art. 18): Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format (CSV, JSON).
• Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing.
• Rights Related to Automated Decision-Making (Art. 22): AI features do not make fully automated decisions with legal effects. You can always override AI suggestions.

To exercise any of these rights, email us at privacy@kamililabsllc.com. We will respond within 30 days.

4. Data Protection Officer

For data protection inquiries, contact our privacy team at privacy@kamililabsllc.com.

5. Cross-Border Transfers

Kamili One is hosted on Azure (Microsoft) infrastructure. Data may be transferred outside the European Economic Area (EEA). We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) with all sub-processors
• Data Processing Agreements (DPAs) with service providers
• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and compliance assessments

6. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. We encourage you to contact us first at privacy@kamililabsllc.com so we can address your concern directly.